Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
File:                     9YmCO6FHWAB83oc69L9H_Zw5c3s.mft (raw, json)
Hash identifier:          cKg5fam5cDtyJXyn5bZo2BqXNQRlxcvTBYX38Y18RvM=
Subject key identifier:   1A:1E:69:0B:09:1D:B2:0D:81:0A:1A:06:87:D0:81:9B:2A:01:7E:1D
Authority key identifier: F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B
Certificate issuer:       /CN=f589823ba14758007cde873af4bf47fd9c39737b
Certificate serial:       01974A439755669E7D7750A00D1B9970BDA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
Manifest number:          105E
Signing time:             Sat 07 Jun 2025 12:00:32 +0000
Manifest this update:     Sat 07 Jun 2025 12:00:32 +0000
Manifest next update:     Sun 08 Jun 2025 12:00:32 +0000
Files and hashes:         1: 9YmCO6FHWAB83oc69L9H_Zw5c3s.crl (hash: ZiVrZvg8y4RxAk8R9abDccu0KB3hT12PEL9EqFqdaVo=)
                          2: cwCE2hhjusn86QvOu2pcA9KTbHA.roa (hash: NxYhK1mgxO/73LOxU0Rf/stDIA61i1imewNDavbu5Zs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:43:97:55:66:9e:7d:77:50:a0:0d:1b:99:70:bd:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f589823ba14758007cde873af4bf47fd9c39737b
        Validity
            Not Before: Jun  7 12:00:32 2025 GMT
            Not After : Jun  8 12:00:32 2025 GMT
        Subject: CN=1a1e690b091db20d810a1a0687d0819b2a017e1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:24:47:f6:90:b9:83:52:73:99:84:97:a3:a1:
                    58:3e:1e:ed:f3:99:23:b6:95:2a:9b:cf:da:74:34:
                    16:14:c5:59:b8:3d:c5:27:1c:a2:36:75:1a:49:ba:
                    a0:2f:17:33:fe:80:6c:91:b1:4c:4f:c6:81:90:ed:
                    19:e8:94:8c:ff:d6:07:00:d2:05:32:73:f7:6e:87:
                    ee:e0:e0:ac:95:ed:d0:cb:00:98:c0:b6:48:04:d1:
                    1a:cc:7b:51:66:bd:13:b8:47:0d:76:82:82:61:b0:
                    7d:98:dd:fb:84:ba:33:e2:7e:71:d4:fc:9c:83:41:
                    94:31:ed:db:50:0f:92:d4:64:6e:e1:50:9f:93:94:
                    f6:f6:8d:fe:8f:8d:19:47:27:04:54:d2:4c:21:12:
                    d8:d6:19:0a:00:ab:b0:73:f7:4e:bb:b9:f7:9c:5e:
                    36:8d:da:23:e4:33:65:fb:b7:06:04:a5:a4:69:1e:
                    7a:90:23:46:7d:f2:ef:a5:92:7a:5c:42:89:01:72:
                    25:e6:5c:37:eb:05:23:a9:6d:e4:d2:c5:78:c2:54:
                    9a:b0:6f:a1:ae:db:7a:b7:ce:ea:6e:99:ff:1d:a8:
                    4c:eb:c5:97:93:1e:7c:8d:b5:20:da:23:a3:1e:33:
                    1a:5a:2c:55:e1:9e:88:fb:a3:52:fe:66:14:e7:bc:
                    eb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:1E:69:0B:09:1D:B2:0D:81:0A:1A:06:87:D0:81:9B:2A:01:7E:1D
            X509v3 Authority Key Identifier:
                keyid:F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:81:8c:a2:5a:8a:45:e4:b3:20:34:c1:ee:29:d2:1a:d5:99:
         9f:dd:1e:77:bf:11:cd:1c:da:29:bd:ba:6a:b1:f8:04:b1:2e:
         28:7d:29:c7:97:8e:8d:ad:27:3d:f0:e7:31:64:74:17:91:e1:
         81:66:1c:f5:87:2e:42:eb:7f:7a:af:67:30:12:33:12:8f:f1:
         ba:63:61:80:1a:9a:fd:5e:e4:66:ec:9c:e2:3d:70:40:0b:f5:
         c8:3d:68:d4:ad:b2:52:14:90:f9:69:c5:f7:47:99:02:12:38:
         bd:be:3f:de:57:e1:f7:3a:04:7f:d2:a5:90:40:2a:5a:95:99:
         8e:b4:b4:c0:27:d5:b8:c6:e0:49:5d:52:3b:37:01:78:43:86:
         65:1e:f9:19:e9:0c:48:44:d9:19:38:be:9e:d4:f0:57:5f:2d:
         03:00:bf:b9:21:f7:63:0c:1e:4e:f6:c3:f9:49:65:23:0d:bc:
         fa:c9:8a:60:ce:dd:4e:a2:4a:8f:74:45:ca:2e:29:2a:5d:d7:
         1a:43:51:39:51:a9:10:30:1a:4c:95:58:76:27:cd:b9:52:e8:
         20:c1:20:92:32:c6:bd:d7:06:b9:05:c6:0c:d6:66:36:5c:87:
         d5:d4:98:6b:bb:3c:3e:5c:65:17:c5:c6:74:bd:f9:2e:8a:33:
         62:83:b6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:27:56 2025 by rpki-client